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DETAILED ACTION 



1. 



Claims 1-37 are pending. 



Claim Rejections - 35 USC § 101 



35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of matter, 
or any new and useful improvement thereof, may obtain a patent therefor, subject to the conditions and 
requirements of this title. 

2. Claims 25, 29, 34, and 37 are rejected under 35 U.S.C. 101 because the claimed 
invention is directed to non-statutory subject matter. 

Claims 25, 29, 34, and 37 recites a program for generating encrypted/decrypted text 
which does not fall under one of the four statutory categories of invention (i.e. process, 
machine, manufacture or composition of matter). Therefore, these claims are directed to 
program per se. 

WIPEP: 2106.01 

I. FUNCTIONAL DESCRIPTIVE MATERIAL: "DATA STRUCTURES " REPRESENTING DESCRIPTIVE MATERIAL PERSE OR 
COMPUTER PROGRAMS REPRESENTING COMPUTER LISTINGS PER SE 

Similarly, computer programs claimed as computer listings per se, i.e., the descriptions or expressions of the programs, are not physical "thi 
They are neither computer components nor statutory processes, as they are not "acts" being performed. Such claimed computer programs ( 
define any structural and functional interrelationships between the computer program and other claimed elements of a computer which perrr 
computer program's functionality to be realized. In contrast, a claimed computer-readable medium encoded with a computer program is a 
computer element which defines 

structural and functional interrelationships between the computer program and the rest of the computer which permit the computer program' 
functionality to be realized, and is thus statutory. See Lowry, 32 F.3d at 1583-84, 32 USPQ2d at 1035. Accordingly, it is important to distingi 
claims that define descriptive material per se from claims that define statutory inventions. 



Specification 



3. 



The use of the trademark NTRU has been noted in this application. It should be 



capitalized wherever it appears and be accompanied by the generic terminology. 



Although the use of trademarks is permissible in patent applications, the proprietary 



nature of the marks should be respected and every effort made to prevent their use in any 



manner which might adversely affect their validity as trademarks. 
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Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the phor art 
are such that the subject matter as a whole would have been obvious at the time the invention was made to a 
person having ordinary skill In the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner In which the Invention was made. 

4. Claims 1-37 are rejected under 35 U.S.C. 103(a) as being unpatentable over Hoffstein, 
ET al. (US 6,298,137) in view of Irvin (US 6,832,314). 
As per claim 1 : 

Hoffstein discloses a parameter generation apparatus for generating an output 
parameter that is a set of parameters causing no decryption error for an NTRU cryptosystem, 
the parameter generation apparatus comprising an error-free output parameter generation 
unit operable to generate the output parameter tliat does not cause any decryption errors, 
based on error condition information that is provided in advance, said error condition 
information indicating a condition for causing no decryption error. 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public key cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
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discusses the fifth type of trap door function which has been used to create public l<ey 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col.6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
is no error. The error check value for the decrypted message can indicate no error message 
(col.4, lines 30-46 and col.11, lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error check value for the decrypted message 
indicates no error (Irvin - col.4, lines 30-46 and col.11, lines 10-12). 
As per claim 2: See Hoffstein on col. 10, lines 35-40 and Irvin on col.4, lines 30-46 and 
col.11, lines 10-12; discussing the parameter generation apparatus according to claim 1, 
wherein the error-free output parameter generation unit includes: a provisional parameter 
generation unit operable to generate a set of provisional parameters that do not cause any 
decryption errors, based on the error condition information; and an output parameter 
generation unit operable to generate the output parameter, using said set of provisional 
parameters, based on a lattice constant that is calculated from said set of provisional 
parameters. 
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As per claim 3: See Irvin on col.4, lines 30-46 and col. 11, lines 10-12; discussing the 
parameter generation apparatus according to claim 2, wherein the provisional parameter 
generation unit generates the set of provisional parameters that do not cause any decryption 
errors, based on an input parameter and the error condition information, said input parameter 
being a set of parameters for the NTRU cryptosystem that are inputted from outside. 
As per claim 4: See Hoffstein on col.5, lines 10-20; discussing the parameter generation 
apparatus according to claim 2, wherein the output parameter generation unit generates the 
output parameter, using the set of provisional parameters, based on security determination 
information and security level information, said security determination information being 
associated with the lattice constant, and said security level information indicating a level of 
security against decryption performed by a third party. 

As per claim 5: See Hoffstein on col.5, lines 10-20 and col. 10, lines 35-40; discussing the 
parameter generation apparatus according to claim 4, wherein the output parameter 
generation unit includes a security determination information holding unit operable to hold the 
security determination information, and said security determination information is provided 

from outside. 

As per claim 6: See Hoffstein on col. 10, lines 35-40; discussing the parameter generation 
apparatus according to claim 4, wherein the output parameter generation unit includes a 
lattice constant storage unit operable to store one or more lattice constant and security 
determination information pairs, and the lattice constant and the security determination 
information are provided from outside. 

As per claim 7: See Hoffstein on col. 10, lines 35-40 and Irvin on col.4, lines 30-46 and 
col.11, lines 10-12; discussing the parameter generation apparatus according to claim 6, 
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wherein the output parameter generation unit further includes a security determination 
information selection unit operable to select one security determination information from said 
one or more pairs stored in the lattice constant storage unit, based on the lattice constant, 
and the output parameter generation unit generates the output parameter, using the selected 
security determination information and the lattice constant that makes a pair with said 
selected security determination information. 

As per claim 8: See Hoffstein on col. 10, lines 35-40 and Irvin on col.4, lines 30-46; 
discussing the parameter generation apparatus according to claim 6, wherein the output 
parameter generation unit includes: a modification judgment unit operable to judge whether to 
modify the set of provisional parameters, based on the lattice constant and the security 
determination information; a provisional parameter modification unit operable to generate a 
modified set of provisional parameters using the set of provisional parameters, when the 
modification unit judges that the set of provisional parameters should be modified; and a 
generation unit operable to generate the output parameter, using the modified set of 
provisional parameters, based on the security level information. 
As per claim 9: See Hoffstein on col.7, lines 4-50 and col.9, lines 24-40; discussing the 
parameter generation apparatus according to claim 8, wherein the provisional parameter 
modification unit generates the modified set of provisional parameters by modifying a non- 
negative integer dg, included in the set of provisional parameters, for specifying the number 
of coefficients in a random polynomial g whose coefficient values equal to 1 , said random 
polynomial g being used for generating a public key polynomial. 

As per claim 10: See Hoffstein on col.4, lines 14-30 and col.9, lines 48-55; discussing the 
parameter generation apparatus according to claim 2, wherein the set of provisional 
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parameters and the output parameter are each made up of a set of the following: a degree N 
in the NTRU cryptosystem; a non-negative integer p; a non-negative integer q; a non- 
negative integer df for specifying the number of coefficients in a private l<ey polynomial f 
whose coefficient values equal to 1 ; a non-negative integer dg for specifying the number of 
coefficients in a random polynomial g whose coefficient values equal to 1, said random 
polynomial g being used for generating a public key polynomial; and a non-negative integer d 
for specifying the number of coefficients in a random number polynomial r whose coefficient 
values equal to 1 , said random number polynomial r being used for encrypting a plain text. 
As per claim 11: See Hoffstein on col.5, lines 10-20 and col. 10, lines 25-40; discussing 
the parameter generation apparatus according to claim 10, wherein the provisional parameter 
generation unit includes an initial security determination information holding unit operable to 
hold initial security determination information that is associated with time needed to perform 
decryption, and generates the degree N included in the set of provisional parameters, based 
on the security level information and said initial security determination information. 
As per claim 12: See Hoffstein on col.4, lines 14-30 and col. 9, lines 48-55; discussing the 
parameter generation apparatus according to claim 10, wherein the provisional parameter 
generation unit generates the non-negative integer df, the non-negative integer dg, and the 
non-negative integer d that are included in the set of provisional parameters, based on the 
security level information and the degree N. 

As per claim 13: See Hoffstein on col. 10, lines 35-40 and Irvin on col.4, lines 30-46 and 
col.1 1, lines 10-12; discussing the parameter generation apparatus according to claim 10, 
wherein the provisional parameter generation unit generates the non-negative integer q 
included in the set of provisional parameters, based on the error condition information. 
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As per claim 14: See Hoffstein on col.5, lines 10-20 and col. 10, lines 25-40; discussing the 
parameter generation apparatus according to claim 10, wherein the output parameter 
generation unit generates the degree N included in the output parameter, based on the 
security level information and the security determination information. 
As per claim 15: See Hoffstein on col.5, lines 10-20 and Irvin on col.4, lines 30-46 and 
col.11, lines 10-12; discussing the parameter generation apparatus according to claim 1, 
wherein the error condition information is a conditional expression that indicates the condition 
for causing no decryption error. 

As per claim 16: See Hoffstein on col.4, lines 14-30 and col.9, lines 48-55 and Irvin on col.4, 
lines 30-46 and col.11, lines 10-12; discussing the parameter generation apparatus according 
to claim 15, wherein the error condition information is the conditional expression for causing 
no decryption error that is represented as 2pd+2df-1 <q/2, with respect to a non-negative 
integer p, a non-negative integer q, a non-negative integer d, and a non-negative integer df 
that is for specifying the number of coefficients in a private key polynomial f whose coefficient 
values equal to 1, said non-negative integers being for the NTRU cryptosystem. 
As per claim 17: See Hoffstein on col.6, lines 15-60 and col. 12, lines 30-57; discussing the 
parameter generation apparatus according to claim 1, wherein the NTRU cryptosystem is an 
encryption system for encrypting a plain text and decrypting an encrypted text by a method 
comprising the following steps: a selection step of selecting ideals p and q of a ring R that is a 
group of arrays of dimension N in which addition, subtraction and multiplication are defined; a 
generation step of generating elements f and g of the ring R, and generating element F.sub.q 
which is an inverse of f (mod q), and generating element F.sub.p which is an inverse off 
(mod p); a public key production step of producing a public key that includes h, where h is 
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congruent, mod q, to a product that can be derived using g and F.sub.q; a private l<ey 
production step of producing, as a private l<ey, information from which f and Fsub.p can be 
derived; an encryption step of producing the encrypted text by encoding the plain text using 
the public key and element i that is randomly selected from the ring R; and a decryption step 
of producing a decrypted text by decrypting the encrypted text using the private key. 
As per claim 18: 

Hoffstein discloses an encryption system for generating an encrypted text by 
encrypting a plain text in compliance with an NTRU cryptosystem, the encryption system 
comprising: 

a parameter generation apparatus that includes an error-free output parameter 
generation unit operable to generate an output parameter tliat does not cause any decryption 
errors, based on error condition information tliat is provided in advance, said error condition 
information indicating a condition for causing no decryption error; 

a public key generation unit operable to generate a public key based on the output 
parameter generated by the parameter generation apparatus; and (col.4, lines 13-30) 

an encryption unit operable to encrypt the plain text based on the public key. (col. 10, 
lines 55-67 and col.11, lines 1-15) 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public key cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
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are between one and two orders of magnitude faster tlian the most widely used public 
cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col. 6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
is no error. The error check value for the decrypted message can indicate no error message 
(col.4, lines 30-46 and col.11, lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error check value for the decrypted message 
indicates no error (Irvin - col.4, lines 30-46 and col.11, lines 10-12). 
As per claim 19: 

Hoffstein discloses a decryption system for generating a decrypted text by decrypting 
an encrypted text in compliance with an NTRU cryptosystem, the decryption system 

comprising: 

a parameter generation apparatus that includes an error-free output parameter 
generation unit operable to generate an output parameter that does not cause any decryption 
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errors, based on error condition infomnation that is provided in advance, said error condition 
information indicating a condition for causing no decryption error; 

a private l<ey generation unit operable to generate a private l<ey based on tlie output 
parameter generated by tlie parameter generation apparatus; and (col. 10, lines 55-67 and 
col.11, lines 1-15) 

a decryption unit operable to decrypt the encrypted text based on the private key. 
(col.11, lines 17-23) 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public key cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col. 6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
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is no error (col.4, lines 30-34 and col.7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col.4, lines 30-46 and col. 11, lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error check value for the decrypted message 
indicates no error (Irvin - col.4, lines 30-46 and col.11, lines 10-12). 

As per claim 20: 

Hoffstein discloses an encryption system using an NTRU cryptosystem, comprising: 

a parameter generation apparatus for generating and outputting an output parameter 
that is a set of parameters causing no decryption error for the NTRU cryptosystem; 

a key generation apparatus for generating and outputting an encryption key and a 
decryption key for the NTRU cryptosystem; (col. 10, lines 55-67 and col. 11, lines 1-15) 

an encryption apparatus for generating an encrypted text by encrypting a plain text in 
compliance with the NTRU cryptosystem; and (col.4, lines 13-30 and col.10, lines 30-35) 

a decryption apparatus for generating a decrypted text by decrypting the encrypted 
text, wherein the parameter generation apparatus includes: (col.11, lines 17-23) 

a provisional parameter generation unit operable to generate a set of provisional 
parameters tiiat do not cause any decryption errors, based on error condition information tiiat 
is provided in advance, said error condition information indicating a condition for causing no 
decryption error; and 
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an output parameter generation unit operable to generate the output parameter, using 
said set of provisional parameters, based on a lattice constant that is calculated from said set 
of provisional parameters, and output the generated output parameter, the key generation 
apparatus includes a generated key output unit operable to generate the encryption key and 
the decryption key, using the output parameter inputted from the parameter generation 
apparatus, and output the generated encryption key and decryption key, the encryption 
apparatus includes an encryption unit operable to generate the encrypted text by encrypting 
the plain text, using the output parameter inputted from the parameter generation apparatus 
and the encryption key inputted from the key generation apparatus, and the decryption 
apparatus includes a decryption unit operable to generate the decrypted text by decrypting 
the encrypted text, using the output parameter inputted from the parameter generation 
apparatus and the decryption key inputted from the key generation apparatus, (col. 10, lines 
35-40 and col. 12, lines 10-55) 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public key cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
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further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col. 6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
is no error (col.4, lines 30-34 and col.7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col.4, lines 30-46 and col. 11, lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error check value for the decrypted message 
indicates no error (Irvin - col.4, lines 30-46 and col.11, lines 10-12). 
As per claim 21 : 

Hoffstein discloses an n encryption system using an NTRU cryptosystem, comprising: 

a parameter generation apparatus for generating and outputting an output parameter 
that is a set of parameters causing no decryption error for the NTRU cryptosystem; (col.4, 
lines 13-30 and col.10, lines 25-50) 

a key generation apparatus for generating and outputting an encryption key for the 
NTRU cryptosystem; and (col.10, lines 55-67 and col.11, lines 1-15) 

an encryption apparatus for generating an encrypted text by encrypting a plain text in 
compliance with the NTRU cryptosystem, wherein the parameter generation apparatus 
includes: (col.11, lines 17-23) 
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a provisional parameter generation unit operable to generate a set of provisional 

parameters that do not cause any decryption errors, based on error condition information tiiat 
is provided in advance, said error condition information indicating a condition for causing no 
decryption error; and 

an output parameter generation unit operable to generate tine output parameter, using 
said set of provisional parameters, based on a lattice constant that is calculated from said set 
of provisional parameters, and output the generated output parameter, the key generation 
apparatus includes a generated key output unit operable to generate the encryption key, 
using the output parameter inputted from the parameter generation apparatus, and output the 
generated encryption key, and the encryption apparatus includes an encryption unit operable 
to generate the encrypted text by encrypting the plain text, using the output parameter 
inputted from the parameter generation apparatus and the encryption key inputted from the 
key generation apparatus, (col. 10, lines 35-40 and col. 12, lines 10-55) 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public key cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
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further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col. 6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
is no error (col.4, lines 30-34 and col.7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col.4, lines 30-46 and col. 11, lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error check value for the decrypted message 
indicates no error (Irvin - col.4, lines 30-46 and col.11, lines 10-12). 

As per claim 22: 

Hoffstein discloses an encryption apparatus for generating an encrypted text by 
encrypting a plain text in compliance with an NTRU cryptosystem, the encryption apparatus 
comprising: 

a provisional parameter generation unit operable to generate a set of provisional 
parameters that do not cause any decryption errors, based on error condition information tiiat 
is provided in advance, said error condition information indicating a condition for causing no 
decryption error; 
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an output parameter generation unit operable to generate an output parameter, using 
said set of provisional parameters, based on a lattice constant that is calculated from said set 
of provisional parameters, and output the generated output parameter that is a set of 
parameters causing no decryption error for the NTRU cryptosystem; (col. 10, lines 35-40 and 
col.12, lines 10-55) 

a parameter transmission unit operable to transmit the output parameter to a 
decryption apparatus; (col.4, lines 13-30 and col.5, lines 10-40) 

an encryption key receiving unit operable to receive, from the decryption apparatus, an 
encryption key for the NTRU cryptosystem that is generated based on the output parameter; 
and (col. 10, lines 55-67 and col.11, lines 1-15) 

an encrypted text generation unit operable to generate the encrypted text by 
encrypting the plain text, based on the output parameter and the encryption key. (col.11, 
lines 10-23) 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public key cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
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further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col. 6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
is no error (col.4, lines 30-34 and col.7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col.4, lines 30-46 and col. 11, lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error check value for the decrypted message 
indicates no error (Irvin - col.4, lines 30-46 and col.11, lines 10-12). 
As per claim 23: 

Hoffstein discloses an encryption apparatus for generating an encrypted text by 
encrypting a plain text in compliance with an NTRU cryptosystem, the encryption apparatus 
comprising: 

a parameter receiving unit operable to receive an output parameter ttiat does not 
cause any decryption ernDrs and ttiat is generated based on error condition information that is 
provided in advance, said error condition information indicating a condition for causing no 

decryption error; 
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a public key generation unit operable to generate a public key based on the output 
parameter received by the parameter receiving unit; and (col.4, lines 13-30 and col.5, lines 
10-40) 

an encryption unit operable to encrypt the plain text based on the public key. (col. 10, 
lines 55-67 and col.11, lines 1-23) 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public key cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col.6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
is no error (col.4, lines 30-34 and col.7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col.4, lines 30-46 and col.1 1 , lines 10-12). 
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Therefore, it would have been obvious for a person of ordinary sl<ills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error check value for the decrypted message 
indicates no error (Irvin - col.4, lines 30-46 and col. 11, lines 10-12). 
As per claim 24: 

Hoffstein discloses an n encryption method for generating an encrypted text by 
encrypting a plain text in compliance with NTRU cryptosystem, the encryption method 
comprising the following steps of: 

generating a set of provisional parameters that do not cause any decryption errors, 
based on error condition information that is provided in advance, said error condition 
information indicating a condition for causing no decryption error; 

generating an output parameter that is a set of parameters causing no decryption error 
for the NTRU cryptosystem, using said set of provisional parameters, based on a lattice 
constant that is calculated from said set of provisional parameters, and outputting said 
generated output parameter; (col.4, lines 13-30 and col.10, lines 35-40 and col.12, lines 
10-55) 

generating an encryption key for the NTRU cryptosystem based on the output 
parameter; and (col.10, lines 55-67 and col. 11, lines 1-15) 

generating the encrypted text by encrypting the plain text, based on the output 
parameter and the encryption key. (col.11, lines 10-23) 
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Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public l<ey cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col.6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
is no error (col.4, lines 30-34 and col.7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col.4, lines 30-46 and col.1 1 , lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error check value for the decrypted message 
indicates no error (Irvin- col.4, lines 30-46 and col.1 1, lines 10-12). 
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As per claim 25: 

Hoffstein discloses a program for generating an encrypted text by encrypting a plain 
text in compliance with NTRU cryptosystem, the program causing a computer to execute the 
following steps of: 

generating a set of provisional parameters that do not cause any decryption en-ors 
based on error condition information tliat is provided in advance, said error condition 
information indicating a condition for causing no decryption error; 

generating an output parameter that is a set of parameters causing no decryption error 
for the NTRU cryptosystem, using said set of provisional parameters, based on a lattice 
constant that is calculated from said set of provisional parameters, and outputting said 
generated output parameter; (col.4, lines 13-30 and col. 10, lines 35-40 and col.12, lines 
10-55) 

generating an encryption key for the NTRU cryptosystem based on the output 
parameter; and (col. 10, lines 55-67 and col.11, lines 1-15) 

generating the encrypted text by encrypting the plain text, based on the output 
parameter and the encryption key. (col.11, lines 10-23) 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public key cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
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cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col. 6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
is no error (col.4, lines 30-34 and col.7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col.4, lines 30-46 and col.1 1 , lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error check value for the decrypted message 
indicates no error (Irvin- col.4, lines 30-46 and col.1 1, lines 10-12). 
As per claim 26: 

Hoffstein discloses a decryption system using an NTRU cryptosystem, comprising: 
a parameter generation apparatus for generating and outputting an output parameter 

that is a set of parameters causing no decryption error lor the NTRU cryptosystem; (col.4, 

lines 13-30 and col.5, lines 10-40) 

a key generation apparatus for generating and outputting a decryption key for the 

NTRU cryptosystem; and (col. 10, lines 55-67 and col. 11, lines 1-15) 
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a decryption apparatus for generating a decrypted text by decrypting an encrypted text 
in compliance witli tlie NTRU cryptosystem, wlierein tine parameter generation apparatus 
includes: (col. 11, lines 17-23) 

a provisional parameter generation unit operable to generate a set of provisional 
parameters that do not cause any decryption errors, based on error condition infonmation that 
is provided in advance, said error condition information indicating a condition for causing no 
decryption error; and 

an output parameter generation unit operable to generate the output parameter, using 
said set of provisional parameters, based on a lattice constant that is calculated from said set 
of provisional parameters, and output the generated output parameter, the key generation 
apparatus includes a generated key output unit operable to generate the decryption key, 
using the output parameter inputted from the parameter generation apparatus, and output the 
generated decryption key, and the decryption apparatus includes a decryption unit operable 
to generate the decrypted text by decrypting the encrypted text, using the output parameter 
inputted from the parameter generation apparatus and the decryption key inputted from the 
key generation apparatus, (col. 10, lines 35-40 and col. 12, lines 10-55) 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public key cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
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cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col. 6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
is no error (col.4, lines 30-34 and col.7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col.4, lines 30-46 and col.1 1 , lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error check value for the decrypted message 
indicates no error (Irvin- col.4, lines 30-46 and col.1 1, lines 10-12). 
As per claim 27: 

Hoffstein discloses a decryption apparatus for generating a decrypted text by 
decrypting an encrypted text received from an encryption apparatus in compliance with an 
NTRU cryptosystem, the decryption apparatus comprising: 

a parameter receiving unit operable to receive, from the encryption apparatus, an 
output parameter that is a set of parameters causing no decryption error for the NTRU 
cryptosystem; 
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a generated key generation unit operable to generate an encryption l<ey and a 
decryption key for the NTRU cryptosystem, using the inputted output parameter, and output 
the generated encryption key and decryption key; (col.4, lines 10-30 and col. 12, lines 10- 
55) 

an encryption key transmission unit operable to transmit the encrypted key to the 
encryption apparatus; and (col. 10, lines 55-67 and col.11, lines 1-15) 

a decrypted text generation unit operable to generate the decrypted text by decrypting 
the encrypted text based on the output parameter and the decryption key. (col. 11, lines 17- 
23) 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public key cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col.6, lines 45-50). Irvine 
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discloses generating an error check value for the decrypted message can determine if there 
is no error (col .4, lines 30-34 and col.7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col. 4, lines 30-46 and col. 11, lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error check value for the decrypted message 
indicates no error (Irvin- col .4, lines 30-46 and col. 11, lines 10-12). 
As per claim 28: 

Hoffstein discloses a decryption method for generating a decrypted text by decrypting 
an encrypted text in compliance with NTRU cryptosystem, the decryption method comprising 
the following steps of: 

generating a set of provisional parameters tliat do not cause any decryption errors, 
based on error condition information that is provided in advance, said error condition 
information indicating a condition for causing no decryption error; 

generating an output parameter that is a set of parameters causing no decryption error 
for the NTRU cryptosystem, using said set of provisional parameters, based on a lattice 
constant that is calculated from said set of provisional parameters, and outputting said 
generated output parameter; (col.4, lines 13-30 and col. 10, lines 35-40 and col.12, lines 
10-55) 

generating a decryption key for the NTRU cryptosystem based on the output 
parameter; and (col. 10, lines 55-67 and col.11, lines 1-15) 
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generating the decrypted text by decrypting the encrypted text, based on the output 
parameter and the decryption key. (col.11, lines 17-23) 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public l<ey cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col.6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
is no error (col.4, lines 30-34 and col.7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col.4, lines 30-46 and col.1 1 , lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
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on the communication networl^ by generating error checl< value for the decrypted message 
indicates no error (Irvin- col.4, lines 30-46 and col. 11, lines 10-12). 
As per claim 29: 

Hoffstein discloses a program for generating a decrypted text by decrypting an 
encrypted text in compliance with NTRU cryptosystem, the program causing a computer to 
execute the following steps of: 

generating a set of provisional parameters that do not cause any decryption errors, 
based on error condition information that is provided in advance, said error condition 
information indicating a condition for causing no decryption error; 

generating an output parameter that is a set of parameters causing no decryption error 
for the NTRU cryptosystem, using said set of provisional parameters, based on a lattice 
constant that is calculated from said set of provisional parameters, and outputting said 
generated output parameter; (col.4, lines 13-30 and col. 10, lines 35-40 and col.12, lines 
10-55) 

generating a decryption key for the NTRU cryptosystem based on the output 
parameter; and (col. 10, lines 55-67 and col. 11, lines 1-15) 

generating the decrypted text by decrypting the encrypted text, based on the output 
parameter and the decryption key. (col.11, lines 10-23) 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public key cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
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features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col.6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
is no error (col .4, lines 30-34 and col. 7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col.4, lines 30-46 and col.1 1 , lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error check value for the decrypted message 
indicates no error (Irvin- col.4, lines 30-46 and col.1 1, lines 10-12). 
As per claim 30: 

Hoffstein discloses an encryption system using an NTRU cryptosystem, comprising: 
a parameter conversion apparatus for converting, into an output parameter, an input 
parameter that is a set of parameters for the NTRU cryptosystem that are inputted from 
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outside, said output parameter being a set of parameters causing no decryption error for tine 
NTRU cryptosystem; 

a key generation apparatus for generating and outputting an encryption l<ey and a 
decryption l<ey for tlie NTRU cryptosystem; (col.4, lines 13-30 and col.5, lines 10-40) 

an encryption apparatus for generating an encrypted text by encrypting a plain text in 
compliance with the NTRU cryptosystem; and (col. 10, lines 55-67 and col.11, lines 1-15) 

a decryption apparatus for generating a decrypted text by decrypting the encrypted 
text, wherein the parameter conversion apparatus includes: (col. 10, lines 17-23) 

a provisional parameter generation unit operable to generate a set of provisional 
parameters ttiat do not cause any decryption errors, based on tlie input parameter and error 
condition information tliat is provided in advance, said error condition infonmation indicating a 
condition for causing no decryption error; and 

an output parameter generation unit operable to generate the output parameter, using 
said set of provisional parameters, based on a lattice constant that is calculated from said set 
of provisional parameters, and output the generated output parameter, the l^ey generation 
apparatus includes a generated key output unit operable to generate the encryption key and 
the decryption key, using the output parameter inputted from the parameter conversion 
apparatus, and output the generated encryption key and decryption key, the encryption 
apparatus includes an encryption unit operable to generate the encrypted text by encrypting 
the plain text, using the output parameter inputted from the parameter conversion apparatus 
and the encryption key inputted from the key generation apparatus, and the decryption 
apparatus includes a decryption unit operable to generate the decrypted text by decrypting 
the encrypted text, using the output parameter inputted from the parameter conversion 
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apparatus and the decryption key inputted from the key generation apparatus, (col. 10, lines 
35-40 and col. 12, lines 10-55) 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public l<ey cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col.6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
is no error (col.4, lines 30-34 and col.7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col.4, lines 30-46 and col.1 1 , lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
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on the communication networl^ by generating error checl< value for the decrypted message 
indicates no error (Irvin- col.4, lines 30-46 and col. 11, lines 10-12). 
As per claim 31: 

Hoffstein discloses an encryption system using an NTRU cryptosystem, comprising: 

a parameter generation apparatus for generating an output parameter from an input 
parameter that is a set of parameters for the NTRU cryptosystem that are inputted from 
outside, and outputting the generated output parameter that is a set of parameters causing 
no decryption error for the NTRU cryptosystem; (col.4, lines 13-30 and col.5, lines 10-40) 

a key generation apparatus for generating and outputting an encryption key for the 
NTRU cryptosystem; and (col. 10, lines 55-67 and col.11, lines 1-15) 

an encryption apparatus for generating an encrypted text by encrypting a plain text in 
compliance with the NTRU cryptosystem, wherein the parameter generation apparatus 
includes: (col.11, lines 10-23) 

a provisional parameter generation unit operable to generate a set of provisional 
parameters that do not cause any decryption errors, based on the input parameter and error 
condition information that is provided in advance, said error condition information indicating a 
condition for causing no decryption error; and 

an output parameter generation unit operable to generate the output parameter, using 
said set of provisional parameters, based on a lattice constant that is calculated from said set 
of provisional parameters, and output the generated output parameter, the key generation 
apparatus includes a generated key output unit operable to generate the encryption key, 
using the output parameter inputted from the parameter generation apparatus, and output the 
generated encryption key, and the encryption apparatus includes an encryption unit operable 
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to generate the encrypted text by encrypting the plain text, using the output parameter 
inputted from the parameter generation apparatus and the encryption l<ey inputted from the 
key generation apparatus, (col. 10, lines 35-40 and col. 12, lines 10-55) 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public key cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col. 6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
is no error (col.4, lines 30-34 and col.7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col.4, lines 30-46 and col. 11, lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffetein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
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causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error ciieck value for the decrypted message 
indicates no error (Irvin- col.4, lines 30-46 and col. 11, lines 10-12). 
As per claim 32: 

Hoffstein discloses an n encryption apparatus for generating an encrypted text by 
encrypting a plain text in compliance with an NTRU cryptosystem, the encryption apparatus 

comprising: 

a provisional parameter generation unit operable to generate a set of provisional 
parameters that do not cause any decryption errors, based on an input parameter that is a 
set of parameters for the NTRU cryptosystem and error condition information indicating a 
condition for causing no decryption error, said input parameter and error condition information 
being provided in advance; 

an output parameter generation unit operable to generate an output parameter, using 
said set of provisional parameters, based on a lattice constant that is calculated from said set 
of provisional parameters, and output the generated output parameter that is a set of 
parameters causing no decryption error for the NTRU cryptosystem; (col. 10, lines 35-40 and 
col.12, lines 10-55) 

a parameter transmission unit operable to transmit the output parameter to a 
decryption apparatus; (col.4, lines 13-30 and col.5, lines 10^0) 

an encryption key receiving unit operable to receive, from the decryption apparatus, an 
encryption key for the NTRU cryptosystem that is generated based on the output parameter; 
and (col. 10, lines 55-67 and col.11, lines 1-15) 
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an encrypted text generation unit operable to generate the encrypted text by 
encrypting tlie plain text, based on the output parameter and the encryption key. (col.11, 
lines 10-23) 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public key cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col. 6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
is no error (col.4, lines 30-34 and col.7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col.4, lines 30-46 and col.11, lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffetein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
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causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error ciieck value for the decrypted message 
indicates no error (Irvin- col.4, lines 30-46 and col. 11, lines 10-12). 
As per claim 33: 

Hoffstein discloses an encryption method for generating an encrypted text by 
encrypting a plain text in compliance with NTRU cryptosystem, the encryption method 
comprising the following steps of: 

generating a set of provisional parameters that do not cause any decryption errors, 
based on an input parameter that is a set of parameters for the NTRU cryptosystem and error 
condition information indicating a condition for causing no decryption error, said input 
parameter and error condition information being provided in advance; 

generating an output parameter that is a set of parameters causing no decryption error 
for the NTRU cryptosystem, using said set of provisional parameters, based on a lattice 
constant that is calculated from said set of provisional parameters, and outputting said 
generated output parameter; (col.4, lines 13-30 and col. 10, lines 35-40 and col.12, lines 
10-55) 

generating an encryption key for the NTRU cryptosystem based on the output 
parameter; and (col. 10, lines 55-67 and col.11, lines 1-15) 

generating the encrypted text by encrypting the plain text, based on the output 
parameter and the encryption key. (col.11, lines 10-23) 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public key cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
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invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col. 6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
is no error (col.4, lines 30-34 and col.7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col.4, lines 30-46 and col.1 1 , lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error check value for the decrypted message 
indicates no error (Irvin- col.4, lines 30-46 and col.1 1, lines 10-12). 
As per claim 34: 
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Hoffstein discloses a program for generating an encrypted text by encrypting a plain 
text in compliance with NTRU cryptosystem, the program causing a computer to execute the 

following steps of: 

generating a set of provisional parameters that do not cause any decryption errors, 
based on an input parameter that is a set of parameters for the NTRU cryptosystem and error 
condition information indicating a condition for causing no decryption error, said input 
parameter and error condition information being provided in advance; 

generating an output parameter that is a set of parameters causing no decryption error 
for the NTRU cryptosystem, using said set of provisional parameters, based on a lattice 
constant that is calculated from said set of provisional parameters, and outputting said 
generated output parameter; (col.4, lines 13-30 and col. 10, lines 35-40 and col.12, lines 
10-55) 

generating an encryption key for the NTRU cryptosystem based on the output 
parameter; and (col. 10, lines 55-67 and col.11, lines 1-15) 

generating the encrypted text by encrypting the plain text, based on the output 
parameter and the encryption key. (col.11, lines 10-23) 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public key cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
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cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col. 6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
is no error (col.4, lines 30-34 and col.7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col.4, lines 30-46 and col.1 1 , lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error check value for the decrypted message 
indicates no error (Irvin- col.4, lines 30-46 and col.1 1, lines 10-12). 
As per claim 35: 

Hoffstein discloses a decryption system using an NTRU cryptosystem, comprising: 
a parameter generation apparatus for generating an output parameter from an input 
parameter that is a set of parameters for the NTRU cryptosystem that are inputted from 
outside, and outputting the generated output parameter that is a set of parameters causing 
no decryption error for the NTRU cryptosystem; (col.4, lines 13-30 and col.5, lines 10-40) 
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a key generation apparatus for generating and outputting a decryption key for tine 
NTRU cryptosystem; and (col. 10, lines 55-67 and col.11, lines 1-15) 

a decryption apparatus for generating a decrypted text by decrypting an encrypted text 
in compliance with the NTRU cryptosystem, wherein the parameter generation apparatus 
includes: (col.11, lines 17-23) 

a provisional parameter generation unit operable to generate a set of provisional 
parameters that do not cause any decryption errors, based on the input parameter and error 
condition information that is provided in advance, said error condition information indicating a 
condition for causing no decryption error, and 

an output parameter generation unit operable to generate the output parameter, using 
said set of provisional parameters, based on a lattice constant that is calculated from said set 
of provisional parameters, and output the generated output parameter, the key generation 
apparatus includes a generated key output unit operable to generate the decryption key, 
using the output parameter inputted from the parameter generation apparatus, and output the 
generated decryption key, and the decryption apparatus includes a decryption unit operable 
to generate the decrypted text by decrypting the encrypted text, using the output parameter 
inputted from the parameter generation apparatus and the decryption key inputted from the 
key generation apparatus, (col. 10, lines 35-40 and col. 12, lines 10-55) 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public key cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 



Application/Control Number: 10/552,586 Page 42 

Art Unit: 2435 

features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col.6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
is no error (col .4, lines 30-34 and col. 7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col.4, lines 30-46 and col.1 1 , lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error check value for the decrypted message 
indicates no error (Irvin- col.4, lines 30-46 and col.1 1, lines 10-12). 
As per claim 36: 

Hoffstein discloses a decryption method for generating a decrypted text by decrypting 
an encrypted text in compliance with NTRU cryptosystem, the decryption method comprising 
the following steps of: 
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generating a set of provisional parameters ttiat do not cause any decryption errors, 
based on an input parameter that is a set of parameters for the NTRU cryptosystem and error 
condition information indicating a condition for causing no decryption error, said input 
parameter and error condition information being provided in advance; 

generating an output parameter tliat is a set of parameters causing no decryption error 
for the NTRU cryptosystem, using said set of provisional parameters, based on a lattice 
constant that is calculated from said set of provisional parameters, and outputting said 
generated output parameter; (col.4, lines 13-30 and col. 10, lines 35-40 and col. 12, lines 
10-55) 

generating a decryption key for the NTRU cryptosystem based on the output 
parameter; and (col. 10, lines 55-67 and col. 11, lines 1-15) 

generating the decrypted text by decrypting the encrypted text, based on the output 
parameter and the decryption key. (col.11, lines 17-23) 

Hoffstein, ET al. is inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public key cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
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further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col. 6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
is no error (col.4, lines 30-34 and col.7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col.4, lines 30-46 and col. 11, lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error check value for the decrypted message 
indicates no error (Irvin- col.4, lines 30-46 andcol.11, lines 10-12). 
As per claim 37: 

Hoffstein discloses a program for generating a decrypted text by decrypting an 
encrypted text in compliance with NTRU cryptosystem, the program causing a computer to 
execute the following steps of: 

generating a set of provisional parameters tliat do not cause any decryption errors, 
based on an input parameter that is a set of parameters for the NTRU cryptosystem and error 
condition information indicating a condition for causing no decryption error, said input 
parameter and error condition information being provided in advance; 

generating an output parameter that is a set of parameters causing no decryption error 
for the NTRU cryptosystem, using said set of provisional parameters, based on a lattice 
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constant that is calculated from said set of provisional parameters, and outputting said 
generated output parameter; (col.4, lines 13-30 and col. 10, lines 35-40 and col.12, lines 
10-55) 

generating a decryption key for the NTRU cryptosystem based on the output 
parameter; and (col. 10, lines 55-67 and col.11, lines 1-15) 

generating the decrypted text by decrypting the encrypted text, based on the output 
parameter and the decryption key. (col.11, lines 17-23) 

Hoffstein, ET al. Is Inventors for NTRU Cryptosystems, Inc. Hoffstein discloses 
encoding and decoding of information, more particularly, a public key cryptosystem for 
encryption and decryption of digital messages by processor system (col.1, lines 15-19). The 
Invention allows keys to be chosen essentially at random from a large set of vectors, with key 
lengths comparable to the key lengths in other common public key cryptosystems, and 
features an appropriate security level, and provides encoding and decoding processes which 
are between one and two orders of magnitude faster than the most widely used public 
cryptosystem, namely the exponentiation cryptosystem (col.2, lines 45-53). Hoffstein further 
discusses the fifth type of trap door function which has been used to create public key 
cryptosystems is based on error correcting codes (col.2, lines 14-21). However, did not 
further include generating output parameter that does not cause any decryption errors based 
on error condition information indicating a condition for causing no decryption error. 

Irvine Includes an error check value generation circuit based on the unencrypted 
message and adds the error check value to the encrypted message (col. 6, lines 45-50). Irvine 
discloses generating an error check value for the decrypted message can determine if there 
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is no error (col.4, lines 30-34 and col.7, lines 22-25). The error check value for the decrypted 
message can indicate no error message (col.4, lines 30-46 and col. 11, lines 10-12). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teachings of Hoffstein with Irvin to teach generating output parameter that does 
not cause any decryption errors based on error condition information indicating a condition for 
causing no decryption error because to selectively encrypt and decrypt messages transmitted 
on the communication network by generating error check value for the decrypted message 
indicates no error (Irvin- col.4, lines 30-46 and col.11, lines 10-12). 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Leynna T. Truvan whose telephone number is (571 ) 272- 
3851 . The examiner can normally be reached on Monday - Thursday (7:00 - 5:00PM). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on (571 ) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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